OpenDeepWiki vulnerabilities

CVEs whose affected-version data names the OpenDeepWiki package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119597Critical· 9.8

6d ago

OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery

OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json. Attackers can mint HS256 beare…

▾ MidnightAIDotNet · OpenDeepWikiEPSS 0.37%via CVEORG